Fortinet : NSE8_811 Questions & Answers

Fortinet NSE8_811 Exam Syllabus Topics:

Fortinet NSE 8 Written Exam (NSE8_811) Sample Questions:

Question 1

Your client wants to use a central RADIUS server for management authentication when connecting to the FortiGate GUL and provide different levels of access for different types of employees.
Which three actions required providing the requested functionality? (Choose three.)

A. Create multiple administrator profiles with matching RADIUS VSAs.
B. Enable accprofile-override in the CLI.
C. Create a wildcard administrator on the FortiGate.
D. Set the RADIUS authentication type to MS-CHAPv2.
E. Enable radius-vdom-override in the CLI.

Question 2

Click the exhibit.
You created an aggregate interface between your FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds. 1 Gbps and employees are complaining that the network is slow. After troubleshooting, you notice only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit.
In this scenario, which command will solve this problem?

A. config system interface
edit Agg1
set min-links 2
end
B. config system interface
edit Agg1
set weight 2
end
C. config system interface
edit Agg1
set lacp-mode active
end
D. config system interface
edit Agg1
set Algorithm L4
end

Question 3

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

A. LAG-1 and LAG-2 should be connected to a 4-port single 802 3ad trunk on another device.
B. LAG-1 and LAG 2 should be connected to a single 4-port 802 3ad interface on the FortiGate-A.
C. LAG-3 on switches on FS448D-A and FS448D-B may be connected to a single 802 3ad trunk on another device.
D. port13 and port14 on FS448D-A should be connected to port13 and port14 on FS448D-B.

Question 4

You must create a high Availability deployment with two FortiWebs in Amazon Services (AWS): each on different Availability Zones(AZ) from the same region. At the same time, each FortiWeb should be able to deliver content from the Web server of both of the AZs. Which deployment would will this requirement?

A. Use AWS Elastic load Balancer (ELB) for both FortiWebs in standdone mode and the internal Web servers in an ELB sandwich.
B. Configure the FortiWebs Active-Active Ha mode and use AWS Router 53 load Router balance the internal Web servers.
C. Configure the FortiWebs in Active-Active HA mode and use AWS Elastic load Balancer (ELB) for the internal Web servers.
D. Use AWS Router 53 to load balance FortiWebs in standone mode and use AWS Virtual private Cloud (VPC) peering to load balance the internal Web servers.

Question 5

You have a customer experiencing problem with a legacy L3L4 firewall device and IPV6 SIP VoIP traffic. They devices is dropping SIP packets, consequently, it process SIP voice calls. Which solution would solve the customer's problem?

A. Deploy a FortiVoice and enable an IPv6 SIP session helper.
B. Deploy a FortiVoice and enable IPv6 SIP.
C. Replace their legacy device with a FortiGate and deploy a FortiVoice to extract information from the body of the IPv6 SIP packet.
D. Replace their legacy device with a FortiGate and configure it to extract information from the body of the
IPv6 SIP packet.

Solutions: